This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json) Hash identifier: 4i9Dm7ON61TY+Z1NnbcMM7JnQmdC/UKfapEVdep/nJ4= Subject key identifier: EC:B7:F4:43:FC:15:2E:11:0C:8E:74:AF:5D:8F:B2:C0:58:40:4F:12 Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Certificate serial: 019B383379B910B64507B334EEE25475A54D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft Manifest number: 0C04 Signing time: Fri 19 Dec 2025 20:00:56 +0000 Manifest this update: Fri 19 Dec 2025 20:00:56 +0000 Manifest next update: Sat 20 Dec 2025 20:00:56 +0000 Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: Svln3G6H1RKxDOeujLF9+sRZaui/aqT3Tc7JmBxKTa8=) 2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:79:b9:10:b6:45:07:b3:34:ee:e2:54:75:a5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Validity Not Before: Dec 19 20:00:56 2025 GMT Not After : Dec 20 20:00:56 2025 GMT Subject: CN=ecb7f443fc152e110c8e74af5d8fb2c058404f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:bf:94:3f:97:d8:04:d0:b4:7c:ad:c4:b4: 76:c7:ae:88:80:b6:83:2e:e1:b5:61:53:a1:49:4a: e8:bd:5a:cb:6e:89:67:cf:87:0c:e8:12:d3:20:a8: a3:dc:6a:7c:30:c4:d3:8e:7c:27:5f:fe:9c:a9:6a: f3:d9:34:4c:9d:07:df:27:e0:f1:af:d2:e2:0f:bc: cb:8b:14:5d:46:e1:1f:38:f6:e9:33:77:91:e0:e3: 72:b6:91:5f:5a:8b:30:aa:78:17:b2:fe:bf:d3:61: 05:91:70:e9:61:71:1b:55:7a:b5:28:59:f6:31:de: a1:4d:49:f2:2a:ef:07:c8:47:d9:68:7a:56:d7:7e: 25:a8:c4:e1:82:89:f4:8f:95:0b:6d:59:62:8d:d8: 2a:12:d8:a4:9b:34:db:65:77:1c:03:95:52:b1:41: 8f:7a:d7:a6:06:db:af:af:70:47:dc:87:e9:e6:aa: c0:cc:87:49:86:59:89:83:f0:0f:81:9d:ac:eb:ce: 92:76:d2:08:e7:2c:8c:6f:67:61:50:0d:2e:4f:0f: 9e:ae:3d:a0:bf:33:e2:ad:02:57:7c:aa:99:07:7a: ae:22:6e:fb:c1:af:e3:29:87:00:a3:cf:4d:de:90: 1a:9b:9b:14:5a:f6:46:8f:e1:7c:0b:0b:1d:c9:f4: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B7:F4:43:FC:15:2E:11:0C:8E:74:AF:5D:8F:B2:C0:58:40:4F:12 X509v3 Authority Key Identifier: keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ce:a8:4a:99:e7:03:53:49:57:91:03:ee:51:e6:ed:4a:5d: 61:6a:3d:4a:7a:7d:9a:78:84:8b:8b:c1:b8:ab:16:a3:cf:46: 7e:b4:2e:20:b5:93:ff:8f:bb:c0:00:c1:7a:2b:0d:c7:cc:f7: c9:22:0b:aa:38:3b:34:0f:ec:64:28:3e:95:b8:78:a9:ef:76: 10:5b:59:a3:43:b9:f5:42:46:77:8f:21:b3:c3:86:e5:2d:b4: c6:05:2e:7c:d8:34:3a:95:0e:1a:5b:a6:24:93:60:2a:36:e0: e9:bc:2b:1d:34:63:65:b6:8e:b1:2b:ec:a4:2e:4e:b1:84:db: 17:d9:3a:d3:cf:9b:7c:56:8c:a0:27:93:49:1c:8e:e7:bd:e8: 0c:ba:89:f9:58:50:20:4c:68:c5:1e:3e:11:99:8f:63:66:fc: 5c:b6:1f:2b:5d:79:0c:1a:e4:89:58:7e:18:0c:8f:86:ff:98: ed:d3:79:af:6d:55:bb:9a:75:8c:38:b5:fe:86:96:0d:31:aa: dd:ab:1e:13:b7:8a:6d:3b:73:32:b7:22:7b:42:43:19:6c:66: d3:3e:0a:6d:fd:b9:62:0e:4f:4c:da:16:a9:ba:ee:4d:c3:42: e0:53:c8:eb:a4:6c:c4:9c:69:48:b2:6d:e0:f0:74:b2:d1:65: b7:20:9f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M3m5ELZFB7M07uJUdaVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4 MmE4NDMwHhcNMjUxMjE5MjAwMDU2WhcNMjUxMjIwMjAwMDU2WjAzMTEwLwYDVQQD EyhlY2I3ZjQ0M2ZjMTUyZTExMGM4ZTc0YWY1ZDhmYjJjMDU4NDA0ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0+/lD+X2ATQtHytxLR2x66IgLaD LuG1YVOhSUrovVrLbolnz4cM6BLTIKij3Gp8MMTTjnwnX/6cqWrz2TRMnQffJ+Dx r9LiD7zLixRdRuEfOPbpM3eR4ONytpFfWoswqngXsv6/02EFkXDpYXEbVXq1KFn2 Md6hTUnyKu8HyEfZaHpW134lqMThgon0j5ULbVlijdgqEtikmzTbZXccA5VSsUGP etemBtuvr3BH3Ifp5qrAzIdJhlmJg/APgZ2s686SdtII5yyMb2dhUA0uTw+erj2g vzPirQJXfKqZB3quIm77wa/jKYcAo89N3pAam5sUWvZGj+F8CwsdyfQVdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy39EP8FS4RDI50r12PssBYQE8SMB8GA1UdIwQY MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt YTAxZWVhNjVmZDMzLzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO86oSpnn A1NJV5ED7lHm7UpdYWo9Snp9mniEi4vBuKsWo89GfrQuILWT/4+7wADBeisNx8z3 ySILqjg7NA/sZCg+lbh4qe92EFtZo0O59UJGd48hs8OG5S20xgUufNg0OpUOGlum JJNgKjbg6bwrHTRjZbaOsSvspC5OsYTbF9k608+bfFaMoCeTSRyO573oDLqJ+VhQ IExoxR4+EZmPY2b8XLYfK115DBrkiVh+GAyPhv+Y7dN5r21Vu5p1jDi1/oaWDTGq 3aseE7eKbTtzMrcie0JDGWxm0z4Kbf25Yg5PTNoWqbruTcNC4FPI66RsxJxpSLJt 4PB0stFltyCf7w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:16 2025 by rpki-client